792 matches found
CVE-2025-50165-x64-Exploit
CVE-2025-50165 Componente de Gráficos de Windows RCE x64 Ejecución remota de código crítica mediante JPEG malicioso – Windows 11 24H2 sin parche CVSS 9.8 – Sin privilegios, sin interacción requerida root@kitploit: CVE-2025-50165 - windowscodecs.dll untrusted pointer dereference Discovered by...
CVE-2026-25261 Untrusted Pointer Dereference in Camera
Memory corruption while processing rear sensor IOCTL calls...
CVE-2026-25261
CVE-2026-25261 is an untrusted pointer dereference in Qualcomm's camera subsystem , specifically during processing of rear sensor IOCTL calls , which can lead to memory corruption . The flaw requires local access with high privileges (e.g., a compromised or malicious local process with camera dri...
CVE-2025-59607 Untrusted Pointer Dereference in Windows Compute
Memory Corruption when copying large input data exceeds normal allocation limits...
CVE-2025-59607
CVE-2025-59607 is an Untrusted Pointer Dereference vulnerability in Qualcomm Windows Compute , where memory corruption occurs when copying large input data that exceeds normal allocation limits. The flaw is rated HIGH (CVSS 7.8) with a local attack vector, low complexity, and low privileges requi...
CVE-2026-21250
CVE-2026-21250: Windows HTTP.sys Local Privilege Escalation Windows 11 24H2 - Local Privilege Escalation 🚨 Análisis técnico y recursos para la vulnerabilidad CVE-2026-21250 Windows 11 24H2 / 25H2 - Windows Server 2022/2025 Este repositorio contiene documentación técnica y recursos para el estudio...
CVE-2024-35250
CVE-2024-35250 PoC para la desreferencia de puntero no confiable en el controlador ks.sys https://github.com/user-attachments/assets/79e8f3e6-91d5-4145-9a78-1d36248c7284 Agradecimientos Créditos al equipo de Devcore y su investigación...
CVE-2025-24990
CVE-2025-24990 — Desreferencia de puntero no confiable en Windows EoP Informe de investigación de Sentinel AI Defense. Solo análisis defensivo — no se publica ningún exploit funcional ni PoC. Un componente privilegiado de Windows desreferencia un puntero recibido de un contexto no confiable sin...
HVCIPwned
CVE-2024-35250 Escalación de privilegios local mediante desreferencia de puntero no confiable en el controlador Windows Kernel Streaming ks.sys. Exploit solo de datos: omite la integridad de código protegida por hipervisor HVCI. Resumen Campo| Detalle ---|--- CVE| CVE-2024-35250 Componente| ks.sy...
CVE-2026-90890
ASRock Polychrome SYNC/RGB software utility developed by ASRock Inc. has an Untrusted Pointer Dereference vulnerability. Authenticated local attackers can send a specially crafted IOCTL request to cause the driver to dereference an unvalidated pointer, resulting in an operating system crash...
CVE-2026-90890 ASRock｜ASRock Polychrome SYNC/RGB software utility - Untrusted Pointer Dereference
ASRock Polychrome SYNC/RGB software utility developed by ASRock Inc. has an Untrusted Pointer Dereference vulnerability. Authenticated local attackers can send a specially crafted IOCTL request to cause the driver to dereference an unvalidated pointer, resulting in an operating system crash...
CVE-2026-90890
This vulnerability affects the driver component of ASRock Polychrome SYNC/RGB software utility , a utility developed by ASRock Inc. for managing RGB lighting. The root cause is an Untrusted Pointer Dereference : an authenticated local attacker with low privileges can send a specially crafted IOCT...
PT-2026-91023
An issue was discovered in camera in Samsung Mobile Processor Exynos 1580 and 2500. An untrusted pointer dereference occurs when a malformed message is sent to the camera driver, causing limited information disclosure or denial of service...
EUVD-2026-77164
An issue was discovered in camera in Samsung Mobile Processor Exynos 1580 and 2500. An untrusted pointer dereference occurs when a malformed message is sent to the camera driver, causing limited information disclosure or denial of service...
Security Updates for Microsoft PowerPoint Products C2R (September 2026)
The Microsoft PowerPoint Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network. CVE-2026-69678, CVE-2026-69767, CVE-2026-69797, CVE-2026-80081 -...
CVE-2026-83939
Untrusted pointer dereference in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally...
CVE-2026-80083
Untrusted pointer dereference in Windows Hyper-V allows an authorized attacker to execute code locally...
CVE-2026-78451
Untrusted pointer dereference in Microsoft Windows SCSI Class System File allows an unauthorized attacker to elevate privileges with a physical attack...